KIS 7.0 MSSQL Intrusion detection

[stride000]

Hi there,

I installed the trial version of KIS 7.0 on a freshly formatted machine and i have these allerts stating: Intrusion.Win.MSSQL.worm.Helkern on UDP port 1434.

How is that possible since the machine just been rebuilt and not connected on the internet until KIS was installed?

Thanks

[MikeNash]

-{ Quote: "Hi there,

I installed the trial version of KIS 7.0 on a freshly formatted machine and i have these allerts stating: Intrusion.Win.MSSQL.worm.Helkern on UDP port 1434.

How is that possible since the machine just been rebuilt and not connected on the internet until KIS was installed?

Thanks" }-

This would appear to be a false positive. KIS seems to mistake the SQL worm for the SQL Server.

So, if you installed from legit disks - should be nothing to worry about.

[TonyW]

I've had five of these intrusion attempts today, but since I've turned off the alerts, I wasn't bothered by them.

It's possible to turn off the notifications for these: go to Settings/Appearance/Events notification, click on Advanced and untick Hacker attack detection.